[edit] News 


BREAKING NEWS (May 2012) - The second tranche of 'deep dive' processing capability at 
RPC has gone live. In addition 2 extra IOC's are being processed at OPC. This brings the current 
'deep dive' capability to: 

• CPCwith 16x 10g P 

• OPC with 7 x lOg 

• RPC1 with 23 x lOg. 

This gives over 300 GCHQ and —250 NSA analysts access to huge amounts of data to support the 
target discovery mission. 

The MTI programme would like to say a big thanks to everyone who has made this possible 
(Winch includes MTl^^H'TG/l TEA, SSMC, SSOS, GTE, ACD, OPP-LEC, IT Services, Rl at. 
ID 

NSA, AHS and ) - a true collaborative effort! 

TEMPORA was delivered by the MTI Enhanced Discovery swimlane, led by 
part of the MTI SIGINT Apps theme led by ^^^■(^■FM) and 



[edit] TEMPORA 


TEMPORA is an Internet Buffer capability being delivered by MTI , IPP and GTE for joint mission 
benefit. It builds upon the key success of the TINT experiment and will provide a vital unique 
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capability to MISD/MCE communities. 


* TEMPORA is the codeword for GCHQs internet buffer business capability as a whole - which 
is the ability to loosely promote a % of traffic across GCHQs SSE access into a repository 
which will keep the content (and its associated metadata) for periods of time (approximately 
3 days for content and up to 30 days for metadata) to allow retrospective analysis and 
forwarding to follow on systems. 

* TEMPORA as a capability is agnostic of the technologies used to promote that traffic and to 
store that traffic and so should not be used as a codeword for the individual components (e.g 
XKS, MVR etc). 

* At the moment the components include, amongst others, GCHQ SSE Access, POKERFACE 
sanitisation, XKS (in various configurations) and it will include MVR in the very near future. 

* TEMPORA also covers the management of the rules used to promote traffic into the internet 
buffer capability. 

* TEMPORA is not processing centre specific. At the moment there are instances of 
TEMPORA at all xPC (Namely CPC, OPC and RPC1). These should be referred to, when 
required, as OPC/CPC/RPC1 TEMPORA 

[ edit ] A bit more detail 

TEMPORA are GCHQ's large-scale. Deep Dive deployments on Special Source access ( SSE ). 
Deep Dive XKeyscores work by promoting loose categories of traffic (e.g.,, all web, email, social, 
chat, EA, VPN, VoIP...) from the bearers feeding the system and block all the high-volume, low 
value traffic (e.g., P2P downloads). This usually equates to —30% of the traffic on the bearer. We 
keep the full sessions for 3 working days and the metadata for 30 days for you to query, using all 
the functionality that Keyscore offers to slice and dice the data. The aim is to put the best 7.5% of 
our access into TEMPORA' s, comprising a mix of Deep Dive Keys cores and promotion of data 
based on IP subnet or technology type from across the entire MVR. At the moment, users are 
able to access 46xiOGs of data via existing Internet Buffers.. This is a lot of data! Not only that, 
but the long-running TINT program and our initial 3-month operational trial of the CPC Internet 
Buffer (the first operational Internet Buffer to be deployed) show that every area of ops can get 
real benefit from this capability, especially for target discovery and target development. Internet 
Buffers are different from TINT in that the latter is purely an experimental, research environment 
whereas Internet Buffers canbeused operationally for EPR, Effects , enabling CNE etc. 

For a more detailed depiction of how TEMPORA and TINT differs please see here . 


f edit l Contacts 

Name Role 



GTE XKS Senior User 
MTI SIGINT apps theme lead 
Enhanced Discovery Project Manager 
Enhanced Discovery XKS SME 
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